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(54) CRACKER MONITOR SYSTEM 

(57)Abstract 

PROBLEM TO BE SOLVED: To provide a cracker 
monitor system that can automatically detect an attack 
from a cracker on a network and protect the network 
from the attack by the cracker in spite of a simple 
system configuration without limiting the communication 
as required or over and the need for a labor by a skillful 
engineer. 

SOLUTION: An entrance of a LAN 1 is provided with a 
sensor 5 that sequentially acquires an IP packet passing 
through the entrance. The sensor 5 senses various 
attacks from a cracker with respect to the LAN 1 on the 
basis of the acquired IP packet. Information with respect 
to the attacker sensed by the sensor 5 is given to a 
director 6 controlling a firewall 2. The director 6 controls 
the setting of the firewall 2 in response to the given 
information to block the IP packet relating to the sensed 
attack from entering the LAN 1. 
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(IMfS 1] IP (Internet Protoco 
1 ) < a«*fT b * v © A *) O fc&^X 

fcl p^y h*KS-T6wi.tJ:!>**y Yy-Z\z 
A«? P*a®i"5^T» I P^y 

sjvcvs r t *ftwt.bi-z>n#m ns«©* 5 y 

«i:»lt, &««©#££&»-#-£ fc*©T;w=*yx 
=f y XAfc«^5#*«sio*»**fti-*-« i b *m&b 

1 ~ 3 wfivfr 1 SI'IE^© * 7 y 

fc«&© I P^-Jr y h^*< t t2ltt5£ I PT Kw* 

Rtf/Xtt3§£ I PT Kuxlcj; 

SfcAfli U %<DftM^tc I P^y b^&ffiC#«B 

y#— S^->^7"A 0 

[§M<«6] MIB%«ttfti¥ik(i. Sufe^y r-?-*lc 

T. '>&< fc^:©Sl{§7£ I PT KV*#5>*fcH— C 
I PT Kl^Xtt$S&#- h##*ti:v^|Cjl& 

5 i> wmfemmft \m *fc£i±*# $ tit 1 * , 0 1 

b 1-Z>m&m 1-5 ovv-f ^> 1 «t£iE«©* 7 y *- 

ISM«I7] Me%*tt*n^a». »B*y 
*(Dl>[-Ufobi£ii£ivX%tcTCP (Transmis 
sion Control Protocol) 
<if«SYNffl I P'Vry hffcot, irt^ 
<o?S5fe I PT Ki'X*£frMcm--?fc&t>0tfM£ttffl 
rt^MSfcW±»#S^ to, ^SYNffllP/-: 
7"y htm— <Dmi9yil PTKi^#.U%5fcI P7Kf 
* £*TT 5 £ *{CWfBT C P < ACKl I P'*fr 

1-5 m^-m^ 1 « KfEfK© ^7yA-i 

bZOH-MlZT&S $ftfcTCP (Transmissi 
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on Control Protocol) l£3£<5 < IS 
|©SYN/ACKffl I P/*^y ht'^ot, '>t£< b 

htvmfSTti pt K^^mmsv^cd-T-fcs 
i><D#mimmM£mfe&&Jk]mzth, k-o, mist 

CPtl-3< ACKffl I P^s/ FtfeoT, MI2#S 
YN/ACKffl I P/^y KOSHfro I PT KV*2tt* 
fa% I PT Fi/XtZtl^tim-Vti&frl P7K^» 
tfj£ft7Gl PT Kt'^*W-t-5t>©^WEffS^rt{- 

10 fcCi£&ft-r5C<t£^i-r3»#5U~5«^-f 

tt*» 1 mcm$.<D? 7 y*-ts^fA„ 

^o^^e>SI«$ifCtfcait»^#J$*vjt I P^ 

^z^b zmtn-t z z. b zmkb-tzmim 1 - 5 ©v> 
ic^o^^fe^f $tt-ct fcSic© 1 p/^y bx*> 

20 ot, ^<DiS«7Cl PT KV**lftftI PT K^ilU 

v^s c b ^ «>: *¥mbi-zmntm 1 - 5 ©v^ 
u^hmm^ixx^tzim<D 1 p^y bx^x. m 

V>5 C £ 5 C i: ^#m^-T6IS*S 1 - 5 ©V> 

-r 1 m\z.mm<oy- 7 ^-gswrA, 

[»*^i 2] iriBiif^ftj^fi. ^-y7 7 t-/<7 

r t *^*p-r5 r b ^#ftir-r5»*« 1 ~ 5 ©vvffc, 

40 feto£frtzwzmirmtomt)Z%±-t%!>mxhz>zb 

*®Wl b 1-5^*5 1-12 ©v vf 1 ^»clH«© ^ 

HM14] sijia^a^a^tfd^a^ mis^^ 

*p*a«s*ttLfc«faE3»lc«*#*o3Hi5c I PT K 
uxRTf/XK$a% I PT K^&#i*5 I P^fry H 
©WIS^ y h V—9 ^©jiA*fi&lti-5*!t3g-e*)5 C i 
Zmkb T-5»*« I ~ 1 2 ©|E«©* 7 y^-ffiv- 

I»^«l 5] MCWPibPff 5^314, JWB«»« 

so 1 ©ais©^Sr^» ut«»€>m*i* 



3 

k&zmmmin jt ipiK^i ^-©itft % iptk 

i'* I P'*>ry htffMB*? hP'-^fcitAi- 
f£© y y y ;fr —m&i/x t a„ 

HQ. hu!E#SYN/B I P'^y htm-Ofsftl PT K 

fi© y 7 y # — H$ t/^T-K. 

*P¥Sd5WIBm 2 ©«g©#££&*n LT*»e>Bf*«* 
NK lfli5#S YNffl I Py<fry htWi — ©iizlfilTE I PT 
K^ttff * I P'<$-y h#IMB*y M7-y-|3&A 

612$*©* 7 S'*-iSWrA„ 
IlftfcJSl 8] «B#SYN«IP/<^y hirR-©i£ 
ffjc I PT Pi"***?* I P/<*-y HPflMB*? h? 

- y tit A-r s cd ?rajh-r 5 ttBSffciSffl », wia#s 

YNffl I p/N'y-y h h m-<r>u% I pt Fi****** 

I P^-Jry h2S|&SB*y M7— y^itA-f-<5©*l!HJl:-t- 

zmmmtmrn x »> t>« < mmztix^z z. t *<mt 
im*m i9] mmtm^mum o tm\±. mw&mk 

WWttl 2 ©«£!©#«£&& UT*»e>Bf«* 
ra> ffif2=frSYN/ACKffl I P/*{ry h©g«7El P 
T KW*£R— ©?53fe I PT KUXtftt-ft I P^y 
HPfltlB*? h5'-^J-itAi-5coSrR&jt-rSft! ! 3®T-& 
5^2: T5iS*«8 |E«©* 7 y 

rA. 

*n#«#lWB* 2 ©«g©ftS**fc*n L-C*»6BfJe* 
G3, ffif2&SYN/ACKffi I P'^jry h©^3fcl PT 
K^fcW— ©SHtic I PT Hv**#*-* I P^y 
h#flMB*y M7-^fcitAi-«©SrfflJhi-5»a*^ 

[IS*^2 1 ] jWIE'&S YN/ACKffl I P*>ry b<D 
5o5fc I P T K l^-(Djgff7E IP7KW 
I P^y h;PflHB*y h9—?lcmA-tZ<DZWtir 

zmmffemmK, mfia#sYN/ACKffl i p^y 

-T5 I P^y h#fi5f2*y hP-yKiiA1-5©£PI 
Jt-r 5 BuffiBf Mf$m X 9 t> * < mfe $ *vc v % « r, i 
&<tf-3if*^2 0i2«©y7>#-g«i'*7A < , 

n» Wfa^«i$*tfc i p/<^y hfcff s&a i pt kw 

xtm—<D$a9b \ PT I P^y-y h*«t& 
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E*y H!7-y-fcitAl-5©*HJh^S»a-C*>5£*: 
- £®fci 9 i2«©y 7 y JtrHW^y A. 

ft^R#ttB*3©«R©*»***n L"C3S»6Bf3ttt 
N. HUlB5>«!l$it.fc I P^y Hc#.5i£{S7c I PT K 
i [h! — ©eKWte I P T KU-^tr^frS I P/<^y h 
^WIB^y h^-^titAi-5©SriaJh-rs«Ba*^tf 

fA, 

10 [g|*«2 4 ] Bui3^#J$ixfc I P^y hlcmzmta 
Ttl PTh'v^tm~<Dm97cl PT K^**1"5 I 
P/^Jry h^MIB^y M7-^twiiA-rS©SrffiJh-t-5 

5fel PT KU^iR— ©?S$fel PT I P 

»*«2 3fB«©y y y*-gfi^fA„ 

^¥«^huib04 <DmM<D%.mm$u vxi^m^m 

20 4 ©aa©««tC#5«5fB I P^'^r y h h PI~ 

®^Hi5cI PTK^^StJ%5teI P7KW*ft5I 
P/^y h*ttB*y M7-^{citAi-5©%ffilt-f5 

*a.a-e&5ci:*^jti:-t-5f«^i OgtO^y* 

ra, »»5 <Dwm<D%.m\mzwm i y h t m- 

omtijt I PT Kl"*&U%5fc I PT Kf^Sr*i--5 I 
P/<^y h^WE^y hy-^icitA^-5©Srfill:i-5 
30 «ia-e*>5 C i: *#m^i-5fl*« i i |B«©^ 7 y * 

im*«2 7] ffiiafea^^fT^^att, 

^06©«M©^|r#SMf3I P/^y hirfl- 
©iiff5c I PT KUOVRU^aft I PT KV^Sr#1-S I 
P^y bimtZ**; M7-y{cjSA-f5©^fflJh-f5 
^aT?fc5^t^#itt-f5«*«l 2lH«©y7y* 

[91*^2 8] mfS^y H7-^©A5nicfi, 
40 h !7-y {cJtA*ffiJt^-5 I P^fr y h ^HRft(cR£ 

^r«4^ y h 7 ^ wimst mmam&tt.. 

Mm&mzm^ y h 7 ^ /v^ tr{W»-f-5 ^ t \z X *) ft 
ozt £®mt ir^m^M 1 4 ~ 2 7 m^-?hfr 1 mc 
|B«©^ 7 y*-i8i'^rA ( 

[00 0 1] 

[0 0 0 2]*«Stt, ^ 7 y#— fciS^y l>!7— ^ 
50 &&m~t-5tctb<Di/x ; rJ*\zmi-Z. 
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[0003] ±m%¥<Dmm\*iimm£tittv 

(LAN) tt\ *<D£<i)U^y--*y hfc* 

£9 Oft) h£#L-Cff*>ivCV^. 
^(DiiftTrt;, gffffiOS I mm^rMc&nz, 

*y h^-^gtitJS-t-ST'n h^/Wi: ft I P (In 
ternet Protocol) ^vfett, aftx 
I P/^-y h©^l|-C^*) t *) $*t$. ^rbT v 

ST'n h3A- (IPO±fi©7'Ph3A') itt, TC 
P (Transmission Control Pr 
o t o c o 1 ) £>5VfiUD P (User Datag 
ram Protocol) %WL\^Z><0&W®iX%>Z> 0 

5, hi?— ^©^^tt5fc*Oi/xrAi: LTtt, 

&»bi;5 * H7-m5 Pic. 7r^ 

■¥>7*-/w (f*b<fi:7T^?*-/v©*£ig£'{>fc-fr 

ski-zmtT-fommrt. mx.ni P'<try nc-t* 

tt§Klft5£ I P7 K^-^&fcl P7 SoifaK- 

PTK^^IftS*^ h (ayfa-?) . 3>>5^f± 

^yh!7-^©^©tf©IP7 
KK*JBW© I P7K^H©^y VV—ir^<r>Tt 

jcff 5 fc» tit, aflsw** y h 9 -?&m* tJv 

mtnVX^Z&&&1bZ> a oJD, 77 -fir*:*— Ate 
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4TOJ: ^^HM^MHH-^t^ *J8*iv6a»i: bT 

b «£ 7 s> h v-t (OfflmVcWhtt 

7 4*£te}i, *ft&fHr£v\t.?t>. 7rWir'7*- 

10 /wmwi&fe&fr ozt nmmx-hz* 

M7-*©«f££gSbfc«fc7&#£^\ ?yv%-fr 

bv&mzmmi^ntzx 7 *>5^fa*ffcfc¥ 

&©**^ffl?gbfcJ:5ft»^{t«:, # 7r 

^i'-'7*-/Ko^*rt^5r#i^bac-r^g^fet), 7 

^©^tt^fc^aft^-f-^T^ 
9, h^-^t^gBirwaffWgS^^g^fc 

[»W*s«HfcbJ: 7 t-TSSS] 
30 [0004] *%Wl-ifrfr?>1%%:Km%>Xft£tltc1z(Z> 

a»«nc*tfnu a«*^s£(±tc$ijisbfc!3. »«s 

I^5ri:m5^77*-©l^fAiSit 

[«S*»*i-6fcJ6<D^g] 

[0 0 0 5] 1&m<r>97yi}— tfi'7XfA|l, 
■5a^$r^i-5fcfclC, IP (Internet P 
40 r o t o c o 1) fcE-3<afi£fT M7-^»A 
f) q^c^DV^-C^A^) PSraSi"5 I P^^y h^^Si 
# U JR# b/c I P 5, h Sri^m-r 5 C t ic i ?) 
y V V—9 ^m-ht 7 y*-i»6©*»Srtt*i-*-ia 

^^7?'*-^J;5#aft*w^^ftbfci:C^, 
#<©a«coft*fi, WWW I P/^y hrt© 

^-^1 p/^y hwa«^ffiic#fc^$)5, «o 
50 Mists' Vv—7n>A*)nX' : {:ZL%m&-rz> 1 p^ 
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fry h£«fE#^&&^J£KJ;oTjli!5cJ&#U ^©Jfc 

samsriiKH-s&s^) srff^^tT. *©#**>€> 

ivff. y^y#-KJ:5#g£yT/wy-^-C&ft-t?£ 

SOT?, *©&&#£ $ftfc££{C#^{CM1-5#^#! ; 
S£2fe-frriJ;V\, ZOtcib. *y 

a#l$f±, *y h?-* £*:©#.$&£ ©am£, 
HI6tt* ; MIUT|||Ri-*«WfePft< % *©afi©S 

«*PU att*4WK±fc|||RLfc9 % J: 
¥fSf±, Wi2* y H7— ^ ©A 5 O Sra^-t-S^T© I 

^•*?»MAC (MediaAccess Contro 
1) 7K^> taflHR©?*-***?' M?-y-fc» 
fc#*V*fcft, y^ytf-fciTlc J: »)-£©#& 

IBM-en, msftWftte^aa, «fc©«s©iwiB:&¥ 

* 7 y *— fc J: 5«^©a«©ftlgtr^»1-5 
ffiffi*y hJ7— *©££&&£*£- 

Lfc**OI P^y hSr^ft<fcf>2l«>cI PTKU- 50 
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u ^oiHSUci p^y hi>e>mE«-s 

*ni-£A:fc£fi. I p/^y h©j£ff7G I PT 
*5feIPTK^ (iiifettlP/^yFOIP^ 

t, 0f3©*nrtfc*#ufc i p y h^effTEi P7 

K i^fttf/XttSl jfe I P T lz X *) &m LTGMf 
-rsci-e, I P^y h 

h^+yfPort Scan) i:mtJti,5a«©^ 
*y H7-^K«*»afc«#«r 

tizz\t&&\,\ co%s-ca, ^7^-(±, i#© 

*«TK«>6*^ha»6, #»#*®*y h!7--*fc# 
L"C > /<*y hrt©fc3fel PT Kl"X*ft£#--MH' 

•t UT» ^rftib© I P^y Mc#-*-3JS**±f!tf;x 
h Sr^> UT«»Ji-5 ^£-C, 3t*M*©^ y M7-^ fc 

ioaflllCBWSit-cv^* I PT K I/^^jK- 
^■f5o ^i*3, buIBjK- h#-§-f±, TCPfe 

5 VttUD Pi:-ettf^1-5T^y fr—>z ^77 h 
7©t-atS(MiBtelnet, ftp, sm 
tp, t f t p^) %3ti-h<DX\ IP^-5ryhrt©T 
C P^-y y*&5V'»f±UDP^y^ic#^-§tt5'7 f — y"C 
&5„ d©a©a«-efi, ±IH©J;5*I P^y h© 

mma, a#, irffl«*y-^y7h!7iT*«v>Tff 

J?it, ^«^©^y h^-ylctt, P7KW 

h#^SV>{cH*5, fio^ffTc I PT 
d5P-T'fc5i 5* I P^y h*stfc|SE«mrartl-# 

©fi, mm** \-v-?kz<DfmfrhTmztix%tz 

I«OIP^y h-e*>oT. ^*<i:1,^©2im7cl 
PT KI"XjPJlV*|cN— T?l.o553fe i pt Kv^XB3S 

$c x ?7y%-\z£z>m2<Dmm<D$LmkLx. -mz 

SYN FLOODt|j;$it5Si©^i 3 fc5c C© 
&mi*. TCP ©^tt^rfijffl UT^ y h J7-* rt©#^ 
©*^ H*y*^>'$-frS'b©-C$>5o i"5fe^*>, TCP 

tnro©*7 hfflT-aft^fT?*^ *-f. 

^. hJcMLTSYNffll P^y hiSim-fSo 
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-fcfH— J?<DfcX b<D I PT KV* hO I P 

TKl/*fc£^;h^*t2i«7eI ^IP7 
Kl^i Lfc I P^-jry hX\ *:0V^ry FrtOTC P 
^y^CDS YNfcTy h&tfACKfcTy h©H©SYN 
Ify h©M r l j £Lfct><DX*>.5„ ^rLX, 
->3>mWl&m-e&. COS YNffl I P'^y h£gtf 
fdfcfr©** htt, WiE-*©** HC*tLXSYN/ 
ACKI1 Cwt, KSYN/ 

ACKffl I P/<*y h-tt, f*L<tt, .LfE4ifcfr©** I- 
© I PT Kl^i— jj<D7b* b<D I PT KW^^it 
m«ff5£ I PT Fl--*, *B$fcI PT KW^i tfc I P 
hX, ^r<D^-5ry HtyDTC P^y ^©S YNkT 
y h&tfACKlfy h£*»£ Tij i LfctOX&S,, 
$£>l~, 3**^3 VSHM&aXtt, r©SYN/AC 
Kffl I Ps<fr? hfcgtTfcatfE-*-©** H±, fflCfife 
HC*tUXACKffl I P^y h&igff U Z 
©ACKffl I P/^y htrffifEte*©** h^SttS^l 

±EACKffl I P'^y Ml, i£L<tt, 
WIS S Y Nffl I P '<>T y f t m-<Dmn 55 IP7K^ 
&tf?S5fc I PT KfX&ff?'* I P^y hX\ ^rco^ 
$"y hrtOTCP^-y^OSYNlfy WACKlf? 
h©n©ACKlfy [-©M r lj £ LfcfcOXfc 
5, *«I5SYN FLOODS, C©i54TCP©# 

tt£f«Jffl-t-5#gx*>»>, c©#gxf±, ^7^- 

tt, ? h H'MLX, 

ifctfcWM^B#fSrtK#iSccDSYNffl I P^y r£i£ff 
-T5„ LX, ^rft&Og-SYNffl I P^y Me*TL 
X±fa#£** F^SYN/ACKffl I P/<^y 
iiff ^ftX^Xfe, ACKffll P/^yhH©^* 
*HCsHfUiV\ CO* 5 fc&ga* ft ± 
fB^** htt, ft^i-SHt^tuXtfcS YNffl I Pa? 
^'/Hu»t5SYN/ACKfflI P^y r-fciSffib 

y hoSflM**»«»i45. ^LX, co^Xfrfcft 
SYNffl^? r^iHit £ttX< ±fB#£*X 
h«, frfcftS YNffl A^y MiJSCfc^^a V&l 
R«l«r«» t^Bi-^ < %<fi>mzi£ S Y Nffl/^ y h 

^y7r^o*#$tttlS#^fc«3, &/<y 

* Mi, TCP©ISIi!ii^TCP±©t- ¥x$m% 
fT5c£#X£fc<4!?, CftKi*), #£**h^ 
^^i--5Cii*5 0 Z<nm<D^m (SYN FLOO 

d) xa, ®i&<D£?\c, itmftm^mmm^ nam 

#< OS YNffl I P/^y h^SB^O^y h!7-^ 

rt<D#3£<£** h (#€© i pt Kt-;*£W1-6** 
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^MV^^WrttC, #<©SYN/ACKfflIP^y 
h#i£«S*tS„ SibtC, ^©SYNffllP/^y 
hfcSV^fiSYN/ACKffl I P/^y Me*M?LX* 
i^l$f£fflf2#je** Hc^f £*vt< ACKffl^ 
^y h#^©#>e** M-i£{f£;rVC::&V\, *£X\ 
#3§9lXfi, iw!B#g&fcl3M£»i. i!«f5*y h?-^ 
^©fl-SBiih CWf § *1<X £ fcT C P < «&© S Y 
Nffl I P^y htfeo-C, 'pt£< £ t>-£©3S5fc I PT 

10 ±8t#£*t, l©#SYNffl I P^y h tH— 

©2HS5g I PT KU^XtBSft I PT KW*£Wi-S£ 
*IC««STCPtcX-J< ACKffl I P/^y-y h^ 5 WE0f 

^Stt, WE^ y h !7-^ 4»6 ^rO^Jciiff $ ti-fc T 
CPlcX-^<m*OSYN/ACKfflI P/<^y hT-fc 

ot, -^*< k fc^oSlffijc I PT Ku^jP-tiv^ita 

lo, SJffiTC PICS^5< ACKffl I P^y HX- 
20 fcoX, «aiE# SYN/ ACKffl I P/^y hOilfSTC 
I PT KV^&XJ^Sjfe I PT htt^im—nta 
% I PT Kv-x£t«i{l5u I PT Kv^*Wi-st>o^ 

N FLOODtV^^-5M2©««©^*fit*^ 

<r>#&b LX, — ^JCT eardrop ir»$^5SS 
«#StfS£>5„ i©S«f4, I P^y h©^IS (SfW 
IP77^//H !C#5*a;ao#ttSr*lJfflLX^y h 

t£t>h. I P^y -YV-^-^y h-h^r/w— ^^Sr 
^•LXteSIS^Siimx, #/V-^Ox-^ftia«*o 

x i p^yy ha>mmztizmc^7-&$icz>ztt> 

ffSKf^ffP. ^<0fc», I P^y VOUftl PT K 
W^©*^ hXI±, ^e^tvfc— gCOl^CI P^y h 

I PCS^<a«X»i, %&m*l P/^y h* 
40 g*7©5*^ h P7K^©*7 h) H,.g*j 

^ofcl P^y h^«§^fcfc©X*>^i:t, 
o±X05>«gB^o I P^-7-y r-£gfrr5*X, #5> 
«|gi5^<0 I P/^y h£g«{£#U ^XO^flSiS^O 
I P/<^ry htrgff LX^t), StSSLXjg© I 

P/<^y (-©f- 9*'&5t-fZ>!SM : kft 0* ifET e a 
rdropfi, CO i 5 4 I P'<<y- y r-<D#ff 

so#tt€r«ffl-rs^xfc«9, ^©treii, ^5-> 

P/^y hSr^^fe©^y h!7-^0#^0^^ He 
50 aift Lfe±X, « t) ©^gB^© I P^<^ y h ^<nm 
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-hiE#£*x hi. **t^i;:« •?©#$*&#© i p^-t- 

£tiX%tc£m<D#MUft<D I P^y h bfrt>7tv> I 
^©&ai£*B#F.S3£g-r5*>©£#5. C©fci&. 
5„ Z<Dn<Z>%.& (Teardrop) XIX t8i£©*n 

<> imtbm.^ftffiiHks #fc©rac#$tas#©i 

*-y h^s'hP-^rtffl^©*^ Mci!ifI$;rvT< 
5« ^Ct? v #389?-efi, Wia^^3J^gf±, WIS* 

^#£;}xTV^Ci£:&*n-fS 0 ZtUcX*), Tea 
r d r o p b^t>nZ>%3(DmM<n%&$:Vk'Mlz&i%i-r 
5CtdSt?t5„ #.1^ *7y#-KJ;5»4©«S© 
?fe^i LT, -JRICL and bmZfrZ>nM<D&m&h 
5. i©#g«. 2HS5c I PT K^at«lft IP7K 

y ft*St*©*y h!7-* ©#£©** Hc^ff 
•f S^t?*>5 0 r©«fc o t£ I P^ry h^iifiSftfc 
M±. -?:© I P^-Jry h<D*Q;»c3Mffl&5C£ 

©#«n?fi. ±m<Oia<. tmitl PTK^St^Jfc 
I PT K^^R— "OJb* I P^y Hj&K *y h!7- 

©i5*l P^y h^ifc^Mv^rttr, ± 

«JMft*n^»f±» WIE^y h^-^lc^rOfl-glS^&aifl 
$iVCt7c«»© I P'N-Jry ht?S>o-C, ^rOSimTuI 
P7 KW«JJ5*i pj KU^ifto 

£©;*;* hO^-lf^^ffioT, t e 1 n e t#te<fc«> 
A-*£a»fc^L7c#jR©/<*!7-K£&o-t\ ^©# 

<tt*y H7-^Ki-t©^»a>?>a6flrsii,T#fc*«o 
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I P^y hT&oT, s«IB#So*:^ *F 

5 1 ©*sgfsWNWrt \mim$kijm vtc t $ % $ so 

««omiB$^s^$^TV>5Ct^fei-5. Ctl/lc 
<fc 9 , ifBOct 5 17- K*ff 
^fel-r^Ct^-CtS., Jfet, ^7y*-lCi5®6 0 

io i 5 fc&s (mm. A' — h aw k) ^ff^s^ig 

OS (Operation System) ©■fe^fa. D 
r^*- A-i:V^iv5^^Sr$iJffl-f5'b©-Cfc5. -f* 

*5*>, WtlfUN I X-?i/ls h) f±. /<y7rt 

x-^ (1 2 8^J£(±Ox-^) i&S-^fcgkjvCt 
fci^. ^y7T-5 s ^— ^7o-U ^©^— /<7P- 
20 L7cx-^rt{c, /V — h K*»*>5i, ^y h!7- 
^W3S#^ifO^^ !7- K^A7J$*tTV^< Tt, * 
OA— ha-rVKSr^fTLTb* 5 iV>5 t©-C*)5. 
WI5m6©^B©^tt, ;©i5 4/^77t-^7 
n - i v * t>ti&± * U 7- a /^56r*-f5 1 0 T? , 
«Jifi© flprj iV^5 3^VK^tf3f?&^Xgi± 
©7 f -^?iJtv>5 0f^©^^->-©x-^^ 
ts*f-*n&Ji1rZ I P^c-jry hds^y M?-^©#^ 

o^^ hJc^i«$tLS„ ^c-e, *%mxtt. mm&& 

I P^y h«r*#.Ufcfc*» 06© 

<tt), ±ia©«t5*06©«s©^^fej-r5ci^ 

-e^5„ fltf^©i5l^7y*-{cJ:5^«Sr«l*i-f-5 

Sr^i-Stoa-CfcS. C©#*J{a*©|g4tJ;*), ^ 
y H7-^fa#^*>5V^H5©*P1St$S#^^, ^ 
» §ixfc?!c«^l^1--57ci?)©«! ! 1lSrJSi-C t i^mt 

40 

[0006] *>5v^f4. ffim®m^&&no®mti., m 

B?fe»**P*a^**P LfcffllE«^iw#5#^©SI«3c 
I PT Kv-^S.t?/XJ±?o^ I PT K^^Sr*-f5 I P 
At^ry hofflffi^y h U— ^^OitASrfflJt1-5iQ;S-C* 
*>So Cixic-t?), ^7y7J-lcJ;5^y h?-^© 

»»K«»$*v» **0**ifc:* Cfc* y M7-^ ©ft 
a^yT/^-TA-^H^i^-etSo itiA^tc 
14, tf-h^^visJah^WiEfiliwaS©^^ 
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. ffl8&&&$a^m*Wa vtcmmm l ©«s©# 

mz.%zmmimjL i pt k^* tm— ©sifts i pt 

■KV^*r*1"« I P^y hj9*fWB*y M7-*«fA 

fflLTV^*x h©I PTK^tfeS©^ C©IP 
T KVXftgflGcI PT PWi LT*y h!7— 
ft$ivc< 5 I P^y h*. SW*«MaSitTi»b9f 

e^Itu I PTKWO*^ hd»P>^y M7-^©«fi 

tt, *H±, II, *y M7— ^^©ii^Srff 

ft < 45. jf Cv SYN FLOODS 

j£©£?JCSYNfflI P/^jry M~S<5V^T&&Lfd» 

a*meg 2 ©as©******) b-ca»e.9fj©»n, me 

#SYN1 1 PA*y ©3&fcl P T Kv^SrW 

I P'*^y h^gfffi^y h!7-^fc«A-r-5©Srffl. 
±-tS^at?$>5 0 i-**>t»» ilS#SYNfflIP/^ 
y h©?63fcl PT Kl^jJSSYN FLOOD©#SS© 

$^TV>5*^ h© I pt Kw-x-efc-s©-?, -t 
©** h© I PT K^Iriftl P7K^it4 I P 

— ^lijl*U-Ca8Srf-5. fEfc, SYN FLOODOt 
g*SYN/ACKffl I P/^y hfc&ftvcttfcl 

g#SYN/ACK| I Ps<fry h©jgff7£I PT 
^tPJ— ©?B^fel PTF^^Sr*-f5 I P/^y h#ffi 

e*y H7-^icaiA-r5©*pajhi-5»a-e*>5o -t 

£fr*>, »£#SYK/ACKlIP^yKJ, SY 
N FLOOD©^*ff*J9i:L.rv^5^7y*-© 

Nffl^y hfc#LT, *y Hz—*!*©** 

/ACKffl I P^rs' F©2lfS7E I P'^y f©i£ff5£ 
I P7 KWXjS, SYN FLOOD©#g©*t*i:£ 
ttTVS** h©I P7KW*5„ got, -e©^ 
y ^rt©** h©I PTK^SrJoifel PT FV 
*£LT, *y P^y htrtt 

^yh«7-^fc^LTJi»fi-5. ±B©i5K» SYN 
FLOODO^it^S I P^-Jry h4*-*y h?- 
^^jtAi-5©*PflJhi-5rtT\ 
hfc*?h?-^rto*^H:tt, BRBSWtt* SYN 
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ffl I P/^y h^© I P^y Hi5SJHI$tVTC*<* 

So -©#£% j^a. 

SftTtfcSYNE I P^y hl^LTfcSS*©^ 
«FJfci-5. &oT, ±iB©i5l' I P^y b#3r*«* 
SYN FLOOD©t*fel(a£CT. MBMSfttWf 

9tSBixt>bw&m* «he*synji i p^y hi 
n-oa»s i pt k^mm-* i p^y h&wm 

*y hP-*fcitA^5©*&lM-5*&3*r&t?. *>S 

v^n. meft*tt*i3H£#tteit 2 ©««©#«;£&& 

UC*»€>jK&M. ttS&SYN/ACKHP^y 
h »Su5fc W— ©ijlff te I PT K Z% 

■T5 I P^y h^WS^y bV-fKmA-tZOZW. 
ki-ZmmZ-Stio SYN FLOODS 

tt\ ^7y*-i5SYNfflI P^y hiHltStl 
20 LT. mtSjtl PT Fl/^^r^ofc 1 ?, i^fSTcI PT K 

IB«-SYNffiI P^y h©SHt^I fc5 
^f±-tit{C^J6LfcSYN/ACKffl I P'^y KcD^e 
*IP7KWtt, ^^y^-wWaTI-feS*^ h© 
I PT K^t?*>5^l8tt^S5V\ ftot, ^©±54 
I PT Ri"XttgflEcI P7KwiU*t5I 
eryhfi, $&i*&%i£HXi>*hffi%&mti*y b9- 
9\ZttL.xmiirZ. Ztliz£*) y ^?y*-OSffc 

30 r©^$f,tC. MIE€-SYN^I P/^ry hi^-© 
aifllSIPTKV^, *>5V"f±, WI2=g-SYN/ACK 
ffll P^y K©aS5feI P7K^iPJ- ©KlfticI P 
T KV^*Wi~5 I P^y h^ttlB^y h7-^jcit 
A-f5©^ffiit-t-5fiuS0r«ltffl«, WESYNffl I P 
^S'fii-03o*IP7K^ 1 fcSV^tt, S5fE# 
SYN/ACKffl I P^y h©ii^5cl PT Y^^b 
ffl—Ofi&ftlPT FUX&G-tZ, I Ps<>ry h^BuE^ 
y h 7-^iCjtA-r5©^HJh+5BJf2Blf^WJ; 9 t 
«<^-TSo SYN FLOODOW 

40 «©*x h-©j§fS*»-f5i$M (±E©##i«©0r 
%mm) it. hd5^©^IC»LTIE^lC^L 
#5mS©^t?+^T?fc6„ ZtilcMVX. tyy* 
-©tfaTI-*>5^Tfgtt©^v^^ h^fe^y M7-^ 
-©S{f£i£»rr3Bff.5] (±SB©»#«©3fJWI«l) 

^^^-^©^©ji&f), tbt^«>ftv^©i 
■rz>Z.k&&iZV^t%Z.bti5. ftoX. ±E©bu# 

5„ ^tt^i!?, 4^y h!7-^rt©*^ h©^i:©ii 
ff©a*^*t?#5fc*it«S«Loo, SYN FLOO 
50 Dlc*M-.5*y M7-^©«S'b+^lcS5Ct^-e$ 
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•5. £ fc. Teardrop b^t>HZ>ffi$d.%i3<DmM 

©#g£&*0Lfd§3-»cfcoTfi, mntm^Wt.fr'if*) 
I P Ay- y h #fftl2* y h C - 7 © £PEJH- 

s&s-cfcs. mmftmstitci pAy-y v 

lZ&Z>$aft I PT FW*2\ Teardrop ©#g© 
ttttk Ztix^zm. hoi PTK^tfeSct, * 
©*7vh©I PTF^*£?S$fcI P7K^i:t5I P 

-?lZf8VXmm-tZ>. ZtllZ£*) y Teardrop 
<D$Lm<r>M%.h £*tfc*y H7-7t*g©;fc;* Mctt. 0f 
JfcBflWtt, $m$tl1Z I PA$ry r-t£© I PA^y 

* h-efi, $fcKiim£;ft-C#*:#fggB#© I PA$- y r- 
lcmt5»9©IP^5' h#> S>5g£©l$Wt*! 

p^y h^gf^ra, aufstu-cc 

5„ $?>t, ^W-eji» Te a r d r o p©#&lc:j£ 

Mmm3<omm<o%.&&mmLXfrbffi&mm, 

(OWMtLI PT Fl"*****-* I PA^y h^Mffi^y 

*>, iiUSYN FLOODOMi^il:, MIE 
ftmZtltz IP^y M£#5j§{§7E I P7KWIt 
$7 y^-oWSTI'fcS^^ hOIPT Kl^^t?*>S 
«MWfeJ**V\ «ot, C<0i5ftl PTK^^SKS 
5c I PT FW*£ LTW-f-S I PA$r y htt, 

5c £itfcJ:»K 7yy;fr-©?5c£;fciH-5*y r-?- 

MI5^f!l$tvfc I PA?y-y h\m&miBj£ IP7K^ 
&R— ©2Mi7Gl PT Ki'* I PA^y h^ffif 

SB* y titAi-5©%paihi-5BaiB9f«^ 
fi, a5lE^SiJ$^fc I P^y-y Mc#5?fc$fe I PT 
*&P-©?ii5fcI PT Kl^^«r#t* I PA?*y h^M 
IE* y M7 - y tiSA1-S ©*PUhi-5 fflfBBf^l^ra «t 
DMKR*-*-*. iTt£t>h. SYN FLOOD©* 
T e a e d r o p ©#e#J^©7fr;X h~.©S 

flr«Mrf-$l*H <-fcE©«#H©Bf£li*W) li, »* 

* h#^©#gfc#LTiE^K««Ut5gS©fl#l!a-e 
+#-t?J>-5©{c*fL-t\ ?7y*-©faTi:&5^i 
tt©iS5V^y. h*»e>*y M7-y^©iIjf£^»rf3Bf 
fffl (±ffi©at#«w^3t^W) tt, *y h!7-^©«l 
eUA^fe* tt«i&ft^t>©i^C£;!>s#;£LV^% 

fot, J:1S©gft1l©dr£l$m*. 1t«fl! 
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-7t*J©*7 h©:fl-a$£©iim©gfijg£-?t3fcttPl 
SLoo, Teardrop CtfS^y h!7-^Oft 

[0007] 4fc, LAND£V\b;rv3Btf2»4©SS 

ftiU-C*>.e>Bf3©*JII, tt»4 0«R©*»fc«5WEl 
©aMBS&I PT Fi^JW**! PT 
10 Fw* I PA$r y MMWfB^y 

i-5©*ffl.±-t-5*!!;aT*S>-5o -f*^*>x LAND <tV» 
oimx-K, m^Ttl PTVX'XkfflGl PTK^i 
jJS|ai-Tf*>5 I P^y r-#iiHI$;rVC< 5©"?, *© 
I P^y-y r-<kR-©j£ft7E I PT K^X0%* I P 
T K^t«t« I Wry a&Pttfe&H-C** 
€>0r*«*M» *y b7-tlzMLXmiir& a cWt± 

Sfc, *y h!7— hOa— 
«7- K**#-T5ffiffi»5 ©aS©«*Sr**li-5 
20 Ig^lcjbotli, Wl1MB»8tim5tmti. HUE**. 

©j^Itc I PT KW^Rt^Bft I PT KW^^t-S I 
P^y hs9«aWB*y H7-y KitA-f-5©£IEJt-r5 

^y l<Diz%I PT FU^tt, r- 
OIP7KWi>9, ^1 P^y h©^(S5ri 
I PT F^*tt, ^ 7 y*— ©^STl-fcS*^ h© I 
fi^oT. ^5©*«©?fe^C«5I 
30 P/^y-y I>i:N-©j||ffi7nI P7K^X0%*I PT 
Ki"*fctfi-S I P^<y-y h*» *»3P**P$*vX*»fe 

9, yyy*-tt, «7- FSrfi-T5 I PA*- 

y M7-^©»^©*^Mr3imL-Ct>, ^© 

#Ay.7- FTf h Sr*fPi"5 C i 5 

©*>if5a»«Ms(e»4<**©Tf % ±jB»5©ffig©3fc* 
*»€>*y h V-9&mt* Zb#V&*. -fe^r 
a y x^f *-/V*?iJffl Lfcf5ffi»6 ©aBg©^SSr^fei 

40 ikmk&^mmum 6 ©«g}©#g£&*n vx^hm 

R-©E^f7n I PT KwxfttmUb I PT Fi^Sr^t 
5 I P^y h^ltS^y hI7-y {cJtA-r5©5rPfiJh 

i-s^ax-feSc -r*^*), ^6©s«©^{c#5i 

pA*-y h©?Q*I 

^h©IP7K^-e*>») > $1 Wry b<om 
iajt I PT Fv^tt, ^ 7 7*-©flTt*>5*^ h 
©IP7KW-fc5„ t*o-t, ^6©«|g©^|i# 
5 I P/^y h 1^— ©SKS7C I P T FV*£U%JfcI 
SO PT KV^**f 5 I PA$r y 3fc*3i^*P*itT 
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*-A4r#Ss1-5 I P^y h£r*y M?- 
^^#^0*^ Hcgft LTt, Ml P'^y Mi, S 

JC/l— h =r-^ K*HfT$-fr5 r b #T?# *<*»>, ffi 
WM6<DmM<D$c&frb*y H^-^Sr^S-f-SCt^ 
-e^5. «±fftWLfci?K#«0#££«5 I P/<*- 
y h<D*y (^-^©jtA^, ft«WHfeHct£;CTi 
ftfttfi 1 ? #5S9|-?fi, WIS* y h J7— ^<DA9 Ot, 10 
£*y h!7-^{CjtASra±-t-6 I P^y h£ai«?#) 

lei 9 fx 5. cftKittff, wm^try byj^tbL 

* r A Loo#3§91 c^fi Sr«^1- 5 £ t # 
*rffei:«:S. 4fc\ 7r>ft»*- ^«t(5 t> I P^y 

by Jfr* bLXOMmZGVX&i) . &oT, ttia^ 
J-y-f-M'i ft/V— ^Srffl^SCt toTtg-efc 20 

[0008] *mmv-nMmm&m 1 ft^Ku-cRw 

ICfcVvC, l\t*y t9—? bL.X<DLAUX*$>5o Z 
©LAN 1 }i, M^-tf-Y— h (Etherne 

t) zm^xmm£iitci><ox*h*) , m^z^&irzm 

J $>^7^$:frVXWim.ZthX^5 0 M£ti, ^tt 

— tcp/ 1 p<Dmmzn 5 frtboyy by*. 
r. tc p/ 1 p±-c«igi-5«-«T:/y ^—> 3 ^y 

•7 f-^xT (0!l;tfi, telnet, ftp, smtp 

&m%am> ip\zm^<mm&-*!mbLx^z>. 

L A N Hi, fr*y t-liXffim£frtzi>(D\C 

tfeotiiK ^USS^jiw^xA-Cii, lan 1 

©AOPtC, /^y hyjfrfb LX <D7r - 

/wmmzhtttc^w*.-? 2 (kt, c<o=i>t° 

*VCfc>?, LANltXyT-4 J t'}*—'l'2%3n,X'<^ 
?-*y b3id^$*VCV>5„ 77-ft A"2 
fi, ir'WJ: 5 I P'*fry hOLAN 1 ^©i§A 

i»«r*3&f 5f- * tt5 7 t -f * 

(£(T, y-i^^m^yr^^b^o) 5r*LT*Jt), 
C©7^^?ft77'f^, LAN l^^itA^tlit 
£*tfc«fgOI Py<y-y biU>*-*y 
ft £ftT£ fettle, JfOI P'Vry UrilttLA 
N 1 -<7)jtA*PIlfci-5 0 *LT N 7-f/V^St77'f 
/V-C, LANl^©i§A/i s *lL$il/CW£VU P'^y 50 
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h&mmZtiX$tcb%Kt±, tMLANll:git 
|gSrtfc-frifc-fe>-l^5^^$^^TV^5, cro-fe 

vij-situ, mmyy-(-Y^±~^2^mmi-^^ 

b <D± Xf - 5 1«!f-f V * * 6 fi^rivefta yfi-iS' 
l'i9«j*§4tfc<><D-C*>5. WIS-fe^5ttMx.ffU 

^•L-CMS/^4»cft^$ti--CV^ 0 £<0#£\ 
5{Cf±, TCP DUMP tVt>it/Sy7 h^^T^H 
H$avC*i*l, iCTCP DUMPtCfcoT, ^^4 

x^^^t-ia^^Lfc i p/<^y h©^ft^gf^©tr 

^£{c»bfci:tlcH, -fe^-7-5fi, *t*V^I P^ 
y>«r«*U fffcJ'«t#§ixfc I P^y hSr^-K 
yV^Kfatt^ftl-S. *fc, -fe>-^5fi, IP7K 
\s*ZWtcf. ARP {A dress Resolut 
ionPiotocol) RARP (Re v e r s 
e AdressResolution Protoc 

o l) 4>*>r? hm. &%&fei~'<>ry h&xmistiX 
mZ-WtfeZfrXjoL I P^y (Sf9ii^) 

f - 5 ir f±, ffiit Vtcm 1 ~B 6 «a«©^sra*i-§ 

fei6©77h7x7 (giT, ^^*3T7V^yXA) i5 
Hg§^-cv^5 0 4*5, ^©5^*qT/u^yXAfi, 
x-f l^^^6^||^LT*Jt, ^7-fH^6i©7- 
^SSSrfTV^ooS?fe^^T/i'^y XAOjoaSr-feV 

•y-5tcfT*5*5J;5i-ux'bJ;v\ Wiax w ^ 6 
(KT, y^/^^a«lT/^=^yXA^:v^5) *>H^$tv 

TV^5 0 y^/^t!|«lT/W=fyXA«, 
f-5tCj;*)^»$^5^{CJS:tT, ffinBy^/^S?* 
yr^/KOx-^Sr^ilStlfexSCirT-, 15157 7-( 
ir"7*-/^2^i6!l«-f-5t«-Cfc5« ^IC, J5^5** 

%tmmm%<Dmk<» i p^y h*, siwtg iptkv 

xRVfaft I P7 K^©ttS«JIC^S (y- h) Lfc± 
T\ H*UiV^^*ytSi!3jiA/T-^-t-6. 9 , 
0f*»#raffiffi^«^© I P^y h©H, 
SUtTil PTK^tlTi-*t«>S:tM:4i:«)K:i-5i 
m—<r>H% I P7 K^^**-rt>0^t>i*t«) 
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{cut, **vicm&t? (cuTomw-cfi. c©.t? 
mt^o) „ -tux, ^©^*PkjR9aA/«««©'i 
±-e, mtroi p^y hSr^^y^fc«*-t-5o c 

I P^y Hi, ^©^^/W^A-C^y ic&ij 

aA/fc*i p<«^y i-©?^©*^^ p/*^y h©& 

-fe 5 f*. ^ * y fcjwit© i 5 Uilfc 9 a^fc* i p 
y K© 5 *>. iiffijc I P7 Kl^tfW— t?, fio*aHt 
5c I PTKl'*#LANl©fl-g&©t>©-e&5#I P/< 
>rv h#t»U *©& I P^y Mi*fc-£*ft5 I P 
h^Wt-5^T©?a5feI PTK^Of (rM 
LAN 1 fCjg-rS I P7 Kt^OfTCkS) Srttffl-T 20 
5o *LT, i|B©#I P'^y hp-ettffiLfc^jfel 
PTKv^©#«lc*ru ^r©I P^y M¥ (1^-© 
3tf§7tl P/<^y Mi¥) ^fj, &?S3fcI 

P7Kux©tt&N— Oftftl P7K^fctt, l-o 
TCP->y ^*>5VM4UD P^y ^rt©^$fejK- 

0#f*J) I P^y h©flft&#?v h^- 

5. £©£#, r©#-7^ hft#Bfj£ft (Mxtf2 0 

?!c£##$;h/cv^c:i&&*pu *:©£ 30 

ZVTkmiWi&ZfrK. I P/<^y N»©iS«7n I 
PTKw*©fi£x-*££ me>©x-^Sr« 

5 0 c©i5*Ma^m7ci P7 K^^n— a 

ogSHfjcI PTKW*#LANlUlJi§&Vv£T©I 
P^y Hi{c^UJ(S^ftfclT,5o **J, 

h^#^^©^-Ctt, #- h#l§-#2VvK 
MfrZ I P y h ©$ft£r# * V £ 5 £ tfc 

&©J:5fc&aKJ:!5#-h;**^v£&fc1-SJ: 
SicL-cfcivx, iimTEl P7 puxitm- 40 

KSHItgI PT K^^LANl^HaJ©fe© 
P^y h&£ttU *r©&I P/^y hf¥ 
I P^-Jry Yfr%irZ>±X<Dft%tf- h## 
©ffifcttffl U *©«tti Ufcfeife^- h#-§-©#tt£# 
L, gt?S5fe#- h##£ttfflL-/c I P/^y hp^f,, 
Efc&Sfctf- h#^©ttiH-©?fe$fcK- h*#-«ru 
loMl PTKv*25SvMcm£»K jgs^Lfc 
9fiS*Blrt'lc»#*ivfc I P^y h©fift£# "7^ h 
•t5„ -tLX, *©#*>- hft#j^ftK*Lfd§£K 



#§8 2001-57554 
20 

-tr ^f - 5 a>e>fu;£© <t ? fcjg 1 w&m&f-# 
b -i w** &m l mmmsef- ? \c 

^ZfrZmiSTt I PT K^*£H-©i@i{i7G I PT KU- 
^fc^-fS I P/^y h^LAN 1 l£iiAl-£©&^.& 

-< -Tr 9 * 2 © 7 A-?SS7 r 4 ^Sr^t #1^. 5. 
CWirt, 7Ht!>*-^2(4, ±!2SI«7cIPTK 
W^**-f-5 I P/<^y b3i»f>^ 
$^T<Si:, ^©1 P^y hfrHSIU. LAN 1 ^ 
©itASrffilhi-S. tf-hx^^XDlkm 
^&LANl*S«S$tt5. **S, x^l^^^6tt, ± 
IBBFf^J^W (5^4) ^gig-T5*T'©^{C % ifelC^-^ 

h thtzm i mmm^-* t^-©^i w&m&f 
mrnfemm (5%m) , ttsia*»»*Dx-^©aifs 

70 1 P7K^HOI P^y h©LANl^©itA 
^ffi.±-f-5-t5$'7r^^!7*-/»'2Sr«i«-f5 0 #o 
JK-h^#-V^©?fc^iKV^TV^IS*)> ^©Sffi 
tcI P^y htt, LANl tcitA 

•T5ri:ttt?t/iV\ ^:L-C, x-fl'^^eii, ±E@f 

m&=r-9*>W&Ttl P7K^H©I P^y h© 
LANl-WitAwait^lSM-So W^©J;5^5K- 

|C X ^2©«|g©^ (SYN FLOOD) ©^*3^ 

a£ff5o ^©fea-eii, -fe^-y-5f±, ^iptkw 

^^-Ci)5IP^s'«oH. LANliCjg-f 
P7K^O#I P/^y h»^L, P 
/<-5ry F»Kt*^5SYNffl I P^y h £■£©&# 
^^J«gtCj(gi!featH-r So ^rL-C. tttUL7c#SYNfflI 

p^y v<owmm^hm-m^ m±tt 2#w> ^ 

lilfe#$*vfcSYNffl I P^y h^, ^ClB3feI PT 

KV^© I P/^y haprtjr^-rsd^^^ 

fttCiMtlLfcSYNffl I P^-jry hS:^ 
fe-C^tjWSYNffl I P/^y h©ffii:^^V hi" 
5. §e>lc, ^©*-7^hLfc^:Hm©SYNfflIP 
/<^ry MC*TLT. ^W^t5ACK« I P'< 
tryb (i^Ktt^SYNffll P^^y hiH3-©aH5 
jcl PTKt'XSrWU to, SSYNlIP^yh 
©TC P^yy«P©'>— ^^##©2>C©'>— 
#Sr#-f5ACKffi I P/^-Jry h) -CfcoT, logtS 
YNlIP/^y h©S(#J^^vf,±|23f^lt^ (2# 

P/^y M^^J'^fi-t-S^^^fl^ #&-f3i§£ 
lifl, ^©^, ±E©*!7^hfcSr r i j -jo«'>$ 
^LT X ftfeftlc, ^tiACKlIP^y 

h ©^strfi^^o fc b # {c±ie©* ?7 v bmmfe 

ft (Mxffl6® «J:-C*>6»a-{-f±, SYN FL 
OOD©#«;SSfc£;h/tv^£i£&*nL, ^©ri:Sr 
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y h^aftTC I P7 FV^®itf-?S^ I P7 K 

^©ttr-y-fc^ (Sir. cfte>©x-y-£f!2«# 

x ottt&m&t&ife i P7 Ki^^^ra— -c. AoK** i 

PTKWX^LANl{CJSi-5^:T©I P'^y r-8Mc 
»LTJR?fem?^S. **5, **KDNB-ett, SYNffl 
I P'^y hWffl^S-^VTSYN FLOODS 
fcUfciP, &©J;d#*a ! 3K«t:t> SYN FLOODS 

T?J.O, ^SlffiTcI P7K^i5LANllC 
P/^y h8K#u ttl P^y HSfc* 
*il5SYN/ACKffl I P^ry h «T-t ©*#Bt38JK 
Kffifcttffli-S. ^UT. &iijL;fc£SYN/ACKffl 
I P/^y h®ttftI»ad>g>j§r£l3K] (Mitf2W) 
rt«#^fcSYN/ACKffl I P^-Jry hs&S x PC 
I P7 KV*© I P^y f>#rtK:#&-*-sa>$ 
d*^, #ft-t--5#^f±. jfeCUffltfcSYN/AC 
KJ3I P^^y r-£r#ft"t-?:ivfb©S YN/ ACKffl I 
P^y hWfiSc&v&y-^hi-S. ^©tfy^ 20 

H,fcWH©SYN/ACKffl I P^y hl'SL 
T, RSYN/ACKil P^y-y h«0JHfa3n I P7H 
i"*bm—(D$a%l P7K^©I P^y hi¥Sr« 

SESYN/ACKffl I P^y Mw^JEEC-f- 5 A C K 
IlP^fh (l¥L<f±^SYN/ACKfflI P^ 
y homtjcl PTFi'Xkm-toj&ftI PTKu*£ 
ft, fl-O, SSYN/ACKffllP^yhOTCP 
^y *r V*#-!5-©&© A C K#-S§-£#1--5 A 

CKffll P^y h) XhoX, loSSYN/ACK 
ffl I P^ y h ©Stm^lii^±ffi0fS«F^ ( 2 #F.a) 30 

rt«cBt#$4xfc%<0^, iP/^yhirtt^ftt 
Sa^Srij^So ZVX. ^©J;5/iACKffl^s' 
h3JSflR6Ei-5»^fctt. *©f|5fi, ±fE©#y-vMfc£- 

CKSlP/^y h©#££^i!ilfc>ofci£iC±i2© 
*^hft*3f«» (W;l«16®) 0Lh-e*>$»ate 
ti, SYN FLOOD©#«#&£;rVC^-5Ci£& 

MSf-^fi, SYN FLOODO^^febfc 
jjH-x— ±®SYN/ACKf I P/^y r-©jg 40 
ffSI P7 K«^^©ttx-^Xt^jfe I PT Kl/*©« 
T— y"-C&5 0 SYN/ACKlIP/^5' 

bomitji I PT" Kl^©ifix-*&TJ%£ I PT 
*©«x-y-f±, *;rV«K £KR91Lfcft£g2ra 
«^x-^^43f7^SYNffi I P^y r-*a& I PT 

K1/^(0{IT-^, iHm7C I PT Fl/^oOttT-^l-ft 
— -fe^f-5d^B5^©<t5*« 

2«*^feix-^*#^6.ttfcBuia7 : -V ^ 9 6 fi, 
^H2a*^^T-^lc-^^ Jx52lif7c I P7FW 
£11— ©J§{a5E I PT Kl^£Wi-5 I P^y r-#L 50 



#iH 2001-57554 
22 

an i jcitAi-s © zmEfrbffifetifm mitti 2 # 

$0) a±-f-6<fc5J'flfflS7r'fTt>^~/l'207^/l'^ 
— ©?s5tel PT KU^SrWi"-5 I P'-^y h#LANl 

KitAi-s©£^&;&«si$ra (M^tf2#r B i) ffijt 

-#-•5 J; 5 J- 7 r -f ir £ * 2 © 7 ^ /vpmfe? r*i 
S-#tifex5„ £©£#. 7r-Ti">*-^2«, ±12 
ai@5£ I PT Kt-^fcfi-f 5 I P/^y K &5^fiJ: 
fB&Sfcl PT P^xttti-S I P^y h 
y H3^62imS^-C<5£, ^IP^'/HrSI 
LANl^©itASrPllfc-r'5. £*U-<£9, SYN 
FLOODO^^tjLANl^gl^^t^i^ 

M 2«#^&T'-y-|^(t5i£{f tg I PT K^*f 
1-5 I P^<7"y h©#&K#5_hf2@T5&$IB (2 5>W) 
^sgig-f &iC-£;te>;ft,fcS?2«:£^&*ll 

m) > ^M2«?fc^felT-^0^«jnI P7K^ii> 
e>©I P^y h©LANl^©iSASrSaih-f--5i?{- 
TrW-¥«7*— ^2 4-Sj»-fS. C©i£J4, l2fS 
Sg&fcx-y-fcfcftSlBft I PT Kl-*£W1-5 I P^ 
try V(D%m\£^Xi>ffimX'1b?> 0 lot, SYN 
FLOOD©^iS|g^T^5K«5. ZV&miC&Zm 
fi7c I PT K^a»C>© I P/^y $>5V>fi^:©^ 
^^•5?S5fe I PT K^-~© I P^y Mi, LAN 
lKiiA-f5Ci:i:±-?£ftV\ tLT, x^l/y^6 
l±, ^2S*^*Px-^lr*j»t5)Sft55I PT Kl^^ 
**Ti-5 I P^y bommk. %2W&&Wi%i7 : —2 
{r*j{75^5fe I PT I P^y V<D$m 

i:©V^•f^t{coV^Tt, *4Ve^(c^1-5±E0f^ 
W (2i>^. 2#ua) «Jftili-S4-efc» BMl2^2a^ 

3fe«!&*Px-y-©iiHf7cl P7K^Mt5 I P^ 
y K fcSV^Ii. »2S?fc^feix-^©*5feI PT K 
l/^Srfi-t~5 I P^y h©LAN l^©iSA©PUfc* 
mfcfZ* W^©J:5JCSYN FLOOD©^©^ 
^3aSrfTofc-fe->-^5tt, ftfC, 03©««©^ 
(Teardrop) <r>W3£®m%'if 0 e ZOtSMX 
it, -fe^f-5li, U% \ PT Fi'Xim-X'hZ I 
7?m©H, LANUCjR-T5?o^I P7KWC 
# I P^y h»c^U DEIP^y 

v^) ^«?5ctt{ri-rs„ ^©»^-s i pm 5>$s^ 

y r-fl, *©I P^y^tOft|075^ r 1 J 
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mm Wz-tf5#m) Mcmmzti, io, 

y bt I P-vyy*«p (0 1 P|»Jt»3ktf75^>'h* 

mci p/<try bmmchzfrzm^z. z<ot%, * 

m^-y b%f;tbX*ivt><D£m'^v b<Dffl$k**t7 
0» gti:-C#>-5#£-|Ctt, Te a r d r o p©#«#5 

Z(D#&&m%i£ihtc&m'<!rv h©iHf5El P7 Kl" 
x©ffix-*.RtJ%$te I PT Ki'XOiix-* £ % (£* 
T, ^frfe©x-y-&IB3«#g;i$&^-y-i:V^) tt 
gsxw * 6 {c#;t5 0 £© <fc 5 ft#ya#?S5fc i pt 

Ku^jHW— lo^JfelPTK^LANlt 

±is?5 frhmmv <£ 5 *ss 3 a^^^x-i? * 

¥X-t>iltcfft&T4l'??6^ MfBSYN FLOO 20 

**tS3K»5cI PT Kl^ir^-©i£ff7SI P7 
**-f-5 IP^^yiLANl JriiA-rSO^m^ 1 

— ©*a5fc I PT FfXfeflri-S I P^y h#L AN 1 

&X.3o ^^(Ci t) v Te a r d r o p©#liS;5»f>LA 
Nl^S$^5i*|; x c ©#£©&& t$*VC^7c 
I PT Kl'*©** h^^«>V-arf^]E#^lc«^-r 
SCt^-CtS,, -LIB<DJ:5teTe a r d r o 
©&&&3£frofci*>if5H:, fU©S!H©# 
f (LAND) ©&*P&3£?T?. C©#L3-C«, ±> 
f-5f±, ?55fel PT K^X^R— X*3bZ> I P^y M¥ 
©?t>, LAN 1 \Z.M~$~?>M!fc I PT KVX©& I P^ 
*-y hl|/5>t>, P/^ ? l-»©$a&I P7K^i 
1^ Cffi©i£{f te I P T K ^ * I P V b Srtt 40 

I P7K^©I P^-Jry fel P'<fry 

htl^CSHfTEl PTK^x-SrWU J.og?l P/^y 

*©£ 5& I P'^y h/SS^RS-fsm^J'tt, 3fcKtttt5 
Lfc I P^-7-y h^i&T-fcftk© I P/<£-y K©$il 
P'^y hOflHteA^M-S. r©££\ gtf/v-^ 
hft^B%«c (Mx:tf6fi) «±-ei>5«^{c|i % LA 
ND©#g#&£;ftTV^C,!:£tfc*t]U ^:©C££* 50 
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-T^-^t, ^ ©#£#&& Sftfc I Ps<lry h©SHf 
jcl PT K^©fltx-^tr (SkT. Ztih<Dy f -&% 

5„ C©«fc5*^3a^5fel P7K^#B- C» fio 
^S5fc I PT KfxffLAN 1 (cjg-f 5^T© I P^T" 
y bmKftLXmikftfrtvZo ~Z^-t5frb1tlJ& 

©j; o t£®4n&&Wi&7-**t*iLb)xtzmm : f4 i> 

y-*6\X «4S^*^^-^^*tv5SI«7£I P 
TFl/Xtm-omfSjcl P7K^S:fU lo> ^ 
iSff IP7K^i HJ-©?b^ I P T K ^ Sr«-T5 
I P^y h^LANllcitA-f5©*S^e>3f^lf 
ID (M^tf5^) ffljh-t-5j:5{cMIBT 7 ^-ln7*- 
^2©7^/^^T 7 ^*/USr##^x5. w©t^, 
TT'f-t^*-/V'2l±, -kfEigftTC I PT KWXXt/?S 
jfel PT KW^fc^rfS I P^y FWyM? h 

3frhmmzh~c<zk, zzv>i?'*frybzmmu 

LAN1— ©itASrffiJh-f5. iWCttJ. LAND© 

«^x-^ic*jrt52im7ci pt Kw*£na-©snt 

5c I PT KVXKlJ%$teI PT K^trW-f -5 I P^ 
y h©#^t#S±l5Bf^W (5^M) 

©B4tt?6:^*37 ? - : ?^-fe^f- 5 *»6W«**.6*at 
tf, *«)»*«»6±B3f3©*l>l (5^M) , n%Amn 
g&&x-*©j£f§7cl PT K^X0%ft I P7KV 
^SrWi-5I P^y h©LANl— ©itA«rffilh1-5 
,t5(C7r-r^!7*-^2^«li-5„ «ot, LAN 

T KV^itWilft I PT KUXtW-f"* I P^y h 
f±, LANltiiA-f5rit±-et*V\ ^LT, f-f 

\at, ^©04a^^^-^©K&«7ci pt 

t P-©j@HS5c I PT Y^*18(.Xffi.% IP7K^*t 
5 I P^y h©LANl^©JtA©P&Jt%^^-S. 

[0009] **3. *iafe^i|-ett, tS4W»m»iaT 

—?~h LT. LANDOtSI^S I P^y h©3HS 
5£ I P T Ki^wttx-y-fcx^ ^ 6 i 5 

icUfc^s, LAND©^«fC#5I P^y b<OW%jt 
\PTY\sXt, PT K^^I4HC|t-eS)5© 

"C, ^©^ffTcI P7K^©ftf-!5'©^!)l;, ^5 
PTKv-xwttSr^^ ^^6^xLTl>J:VN^t 
fit>*>^>^*>S. W^©J;5t, LANDO$?©t 
*B^a*ffofc-tVf"5fi. &tC»5©«S©^« (/N' 

^!7-K©SI#) £&*ni-5ftys£?T5<. -©Ma-e 
li, -fervf-5fi, ^^fe I PT Kv^J^W— e«>5 I 
<7-yh»©5*>. LANl{Cjg-T5?55feI P7K^O 
=& I P^y hPi'ftU LANlC*^h©3--f* 
x-^&t?^^- Fx-^^tf I P^y h^ttffi 
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-f5„ ^^©ttffltfcl P^y h<D^^fe, at— 9* 

p/^y h^etc^^^vhi-^o -©£ 

Z.<D*t?l'Vmmfe ! $k (03x14*2 Offl) £t±-C*fc 

«!!©#£#£ $*t-CV^C,fe£&*PU *©Ci:£^: 
-tf-fk* C ©#«#*&& $;ft,fc I P^y K©i£ft 
tS I P7KV^©ftf-?R^ft I PT K^*©^ 

(«T, CftfeOx-^fcSSsa^^&T 5 - .10 

#3fc3fc I PT Kv^jPM— e» aoKSa* IP7FW 
#LAN 1 ^H-f^^TW I P/^y h»fc^bTJeft 

aastt^-^oam^ i pt Kfajttyj&iE iptk 

fc^rtv?^— ©SKStc I P7 K^XU%5fe I P 
T Kl^fc^-f-S I P'«y-y f#LAN 1 KitA-FS© 
^aft^fj^f^^ («*.!* li*IW) ®Jti-Z£oicm 

x.5. £©£ yrJ^V*— ^214. ±i3^ft7c i 

PT KV*RT*I PT FU^trfi'i-S I P^$-y VfrJ 
h*AXU LANl~©itA£l£lt-F5. £iK£J: 
ANl«i$^ 0 #-h**^V©&*nlf#© 
*J»t5^7c I PT K^St^uft I PT K^Sr#-f 

— y- £ m-<nm 5 a^&fc^-y-as-fe v^- 5 a^sg 

#x.£>*vttf4\ ^©l^^^±IB0fiti*M (m#W) » 
^fg5«#Sfc»:r-y-©3i£{»5G I PT KU*JK«&Jfc 
I PT KV-^SrW-f-S I P^y-y h©LANl^©iiA 

-53HIje I PT Ki'X&tfAft I PT Ft-* I 
P^yHi, LANltcitA-t-SCittT^ftVX, -t 

o fc*£-{C {4, t©f 5 S#*&*Px- ? ©j£ffjc I P 
T PT Kl'Xtfti-S IPa'^H 

P^y-y h©LANl^©ifA©liJfc£jtPfc-*-5, ffiiS 
©4 5lc, LANDW^ofcfc^SrfTofc-fcj/iJ-s 

^-rSfea^fT^o C©^a-Cf4, •fe>'f-5{4, 
PTVUXtm— -e*>S I P'^y h»©5*>, LAN 
llcg-f I PT K^;*©£- 1 P^y h«t» 

^VKttU lo, f-^t-fXi55l2 83t#i±-C 50 
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S>5lP^yh?:tft5. ^LT, ^©4 5&IP 
<5-{ry K^oi^ofcS^Wi, LANl<0*Xh©^ 

*R£*tfc I P^y KOiimS I PT KW*<Dttx-* 

6tc#x.5. 1r^1f5;^i»£©4?&f&6a# 

ffi3c^#>£nx - $ <D miaji. I PT Yi/*RX*$a% I PT 
K t ^ih^hm-^mtii I P T Kv;*&tJ'&& I 
PT K^fe*i-« I P/^y h^LANHCitA-f-5 

©*3M&i»e»arje*w (mrf6i^p B i) m±i-s4 5t 

l»fE7 r * "f * * -A' 2 © 7 -< ^ Wtfcy T * /V'^f 

j^xiSo z<Dt*. yr-< J r<}*-fl'2tx, isaHfjc 
I PT HV*.fttM PT K^SrW-f 5 I P/^y h *s 

yh*HilU LANl-<DitASrffiJh-r5, Ctttci 
»> , L A N 1 (D** h <D* /^j^S^-r 5^ 6 © 
«*w#l&&>€>LANl;&s&»$ft3o ft*, #-h* 

^^x-^tfc^tS^TU I PT VVXRXmft I 
PT Kv^Sr^Ti-S I P^y h©#l^{c#5±IBgf3£ 
(6^) iigig-rSi-eoraic, 5fe(^^?,^fc 

« 6 n&mmto?- 9 1 m-om 5 m^m^-^ & 
^ra (eutfti) . wim6mst&misiy i —?<omm7ii p 

T Kl"XRTJ%&I PT K^*fl-^5 I P^y h<D 
L A N 1 --©iS ASrffl-lti-5 4 5 iC 7 r ir 7* — A> 2 

9 , ^©^t#5s&ff7C I PT K^JttWS* I PT 
K W-^ 4r^"T5 I P/^y M4, LAN 1 tiiA-T5 - 

I PT K^xAtftftts I K^**t 
5 I P/<^'y h I P/^Jry h © L A N 1 ^-©i§A©PIit 
Sr«^-f-5„ KJ:I^WLfc4 5icLT. *^SS^©i/ 
^fAtifttf, -t^f-5^ ^^6tr^A-t-5 
fcttT\ ^7y*-tc45LANl— ©=&«©^*y 
ft*B$ttfc?6:^6>LANl 

5., ZOtctb, *y h7-^tfa#^l4» ?7'y*-t 
45^«:#«LTLANlSrfll^Lfc.'3. 

XI4, LANl©«jffa©37 h4^t5Cti5t 
^7y*-{i45#a^^yT/^'fA 
T»»*PTf # S r. t frb % **^«*J $tv/iV^i51^a. 
LANU^t ©S«£&SiJt£iMIS1-5£«£#'>& 
<*5„ C©fc*, «#^I4, LAN l©jim©S6-S 
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